wwwfnb.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:da:6d:b0:d7:8d:e6:7c:3e:96:74:ff:eb:b2:72:b7:b5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wwwfnb.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:da:6d:b0:d7:8d:e6:7c:3e:96:74:ff:eb:b2:72:b7:b5
Serial Number (int): 302120800709093170257829948351944718464949
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:b8:31:aa:74:06:ca:13:87:ee:e2:93:76:cf:d4:b9:42:7b:0d:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:2a:c8:3d:80:7a:6e:31:d0:4b:fe:b1:20:5a:b5:15:df:ee:77:d3
Fingerprint (sha256): 38:28:b1:86:0f:42:64:ac:98:e2:b8:c2:a0:99:3c:dc:1f:bb:8c:df:a8:aa:91:5d:cb:9b:6b:76:a3:63:60:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wwwfnb.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwwfnb.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1133.icu
*.228.icu
*.2770.icu
*.bettenverleih.de
*.blochworld.co.uk
*.blown.com.au
*.cheaplaptops.us
*.chocolates.co.za
*.dishshop.in
*.duvetcovers.de
*.each.icu
*.ebookhell.to
*.ergonomicofficechairs.com.au
*.fertigbungalows.de
*.floralgifts.com.au
*.frake.de
*.gummistopper.de
*.joboberse.de
*.jopmap.de
*.kaleidosope.co.uk
*.kartuschenpresse.de
*.katzentunnel.de
*.keuschheitsring.de
*.kiscartoon.me
*.kuerbismarmelade.de
*.merchjake.us
*.miniclips.co
*.offroadtrailers.com.au
*.pot2.win
*.rollershades.com.au
*.salarisadmin.nl
*.secondhand-wonderland.co.uk
*.smplytel.de
*.spermaspiele.de
*.synthesizers.com.au
*.teamvalleyretailpark.co.uk
*.thespicerestaurant.co.uk
*.timemachine.net
*.truckspiele.de
*.uhrenforen.de
*.v-i.de
*.weisscom.us
*.wiidrivekey.co.uk
*.wwwfnb.co.za
*.xei.de
*.xn--frhschwangerschaftstest-dpc.de
*.xn--kerzenglser-s8a.de
*.xn--leihmtter-u9a.de
*.xn--schnupfsprche-5ob.de
*.xn--spinatkndel-yfb.de
1133.icu
228.icu
2770.icu
bettenverleih.de
blochworld.co.uk
blown.com.au
cheaplaptops.us
chocolates.co.za
dishshop.in
duvetcovers.de
each.icu
ebookhell.to
ergonomicofficechairs.com.au
fertigbungalows.de
floralgifts.com.au
frake.de
gummistopper.de
joboberse.de
jopmap.de
kaleidosope.co.uk
kartuschenpresse.de
katzentunnel.de
keuschheitsring.de
kiscartoon.me
kuerbismarmelade.de
merchjake.us
miniclips.co
offroadtrailers.com.au
pot2.win
rollershades.com.au
salarisadmin.nl
secondhand-wonderland.co.uk
smplytel.de
spermaspiele.de
synthesizers.com.au
teamvalleyretailpark.co.uk
thespicerestaurant.co.uk
timemachine.net
truckspiele.de
uhrenforen.de
v-i.de
weisscom.us
wiidrivekey.co.uk
wwwfnb.co.za
xei.de
xn--frhschwangerschaftstest-dpc.de
xn--kerzenglser-s8a.de
xn--leihmtter-u9a.de
xn--schnupfsprche-5ob.de
xn--spinatkndel-yfb.de

Other certificates including the domain name wwwfnb.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for wwwfnb.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302120800709093170257829948351944718464949
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 20:27:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 20:27:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwfnb.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818805400395807107925128395160724297480130501163952214897104909043434445177136291755390539905656660609396521903007239764013528918148362168883533320756630448829987360764555810520843321252533357522418811258496973495831904586507262536325389507405976094197914704387036359730927981355912563853665811213021032276947383079067308618770286841630046469391295964714458719170604753247023718921643331762367099540666500694506561219082284452395165761456592266655294804334227030122912841279616786072386864688701153929829626726915646721532183314150208239214181801005847827527637899781412491768086905811121288169317786954606726807307315268127073324972737049452746583695699633782783178113688986205953479678996366608371897574122350751788271524489808043938368715462328138374324813997883481644638340536729801368142100751547664587524580983014982672587038236065256831991188060845720077874065362715239643947504943215597147545265026173141816965888688485123868049574064385435219292689994213614372071307480523218047879452355865765428094963876306195266467362196974040010282613978372627841727343171330120163351029815735158746791690422688904187866516700732291515233707714758777732830793350937441414475726584713759722798156294084261270427204980783820025743681388707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ab831aa7406ca1387eee29376cfd4b9427b0d3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1133.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.228.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2770.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettenverleih.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blochworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blown.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheaplaptops.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocolates.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dishshop.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duvetcovers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.each.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebookhell.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ergonomicofficechairs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fertigbungalows.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floralgifts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frake.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gummistopper.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joboberse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jopmap.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaleidosope.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kartuschenpresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katzentunnel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keuschheitsring.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiscartoon.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuerbismarmelade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merchjake.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miniclips.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offroadtrailers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pot2.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollershades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salarisadmin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secondhand-wonderland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smplytel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spermaspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synthesizers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamvalleyretailpark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespicerestaurant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timemachine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truckspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhrenforen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v-i.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weisscom.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiidrivekey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfnb.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frhschwangerschaftstest-dpc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kerzenglser-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--leihmtter-u9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnupfsprche-5ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--spinatkndel-yfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1133.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '228.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2770.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettenverleih.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blochworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blown.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheaplaptops.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolates.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dishshop.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvetcovers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'each.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebookhell.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ergonomicofficechairs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fertigbungalows.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floralgifts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frake.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gummistopper.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joboberse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jopmap.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaleidosope.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartuschenpresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katzentunnel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keuschheitsring.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiscartoon.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuerbismarmelade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchjake.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miniclips.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offroadtrailers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pot2.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollershades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salarisadmin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondhand-wonderland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smplytel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spermaspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synthesizers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamvalleyretailpark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespicerestaurant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timemachine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrenforen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v-i.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weisscom.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiidrivekey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfnb.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frhschwangerschaftstest-dpc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kerzenglser-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--leihmtter-u9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnupfsprche-5ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--spinatkndel-yfb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ac7b179250000040300463044022034b7305cab67d40b791a7950abc4ccb64176c9f765b25c043043cc036a9b4ede0220292b3b4e2d294cacd65d405f214659f2c5e95b67dbfdc3eb015cac19c3739776007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ac7b1793b0000040300473045022100f7bec4f6e277d8536aba0afd498fb65073f16feb226065f242dc0b197e499c3f02204d115e53e22eefcc454934c253127c25b9d69a7986b8c0c2eb803da69b440636
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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